Homeland 
Security 

Daily Open Source Infrastructure Report 

22 September 2014 

Top Stories 

• Phoenix Sky Harbor International Airport in Arizona reopened Terminal 4 after authorities 
locked it down for over 3 hours and grounded its flights September 1 8 while searching for 
three suspects connected to a shooting at a nearby gas station. - Associated Press (See item 

2 ) 

• A JetBlue flight that was forced to return to Long Beach Airport in California shortly after 
takeoff September 18 landed safely and closed the airport’s main runway for 
approximately 2 hours while the airplane was towed. - Associated Press (See item 10 ) 

• Police arrested a man September 1 8 and charged him with arson in connection to starting 
the 73,184-acre King Fire in El Dorado County, California, that is 10 percent contained and 
threatens over 12,000 residences. - CNN (See item 21 ) 

• Home Depot officials reported September 18 that 56 million payment cards were likely 
compromised when attackers used custom-built malware to breach the networks of stores 
in the U.S. and Canada. - Reuters (See item 33 ) 
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Energy Sector 



1. September 18, Pittsburgh Post-Gazette - (Pennsylvania) Range Resources to pay 
$4.15M penalty. The Pennsylvania Department of Environmental Protection 
announced September 18 that Range Resources will pay $4.15 million to settle 
violations after contaminating soil through its six Marcellus Shale gas drilling and 
fracking wastewater impoundments in Washington County. The company will close 
five of its impoundments and upgrade two others to adhere to safety standards, as well 
as monitor and potentially remediate their closed sites if any contamination is found. 
Source: http://www.post-gazette.com/local/2014/09/18/DEP-orders-Range-Resources- 
to-pay-4-million-fine/stories/20 1 409 180293 
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Chemical Industry Sector 

2. September 19, Beaumont Enterprise - (Texas) One hospitalized in Port Neches 
chemical leak. Authorities are investigating a chemical leak in the shipping and 
receiving area of the Huntsman facility in Port Neches September 1 8 that resulted in 
the hospitalization of one employee. On-site crews capped the leak and the company 
notified State and federal agencies of the release. 

Source: http://www.beaumontenterprise.com/news/article/One-hospitalized-in-Port- 
Neches-chemical-leak-5765410.php 

3. September 18, KXAN 36 Austin - (Texas) Hazmat call prompts Round Rock 
evacuation. HAZMAT crews responded to the Exfluor Research Corp., facility in 
Round Rock September 18 after an undetermined amount of perfluorosuccinoyl 
fluoride leaked from a valve and sparked a fire, prompting an evacuation of the 
building and a shelter- in-place order for nearby businesses and schools. The material 
was transferred to a new container while crews remained at the scene to monitor air 
quality in the area, including inside the building. 

Source: http://kxan.com/2014/09/18/round-rocks-double-creek-being-evacuated/ 

For another story, see item 17 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. September 18, Los Angeles Times - (National) Fire risk prompts Toyota recall of 
Camry, Sienna, Highlander, Lexus RX. Toyota announced September 18 that it will 
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recall around 20,000 model year 2014 Toyota Avalon, Canary, Highlander, Sienna, and 
model year 2015 Lexus RX vehicles equipped with the 2GR-FE engine due to 
insufficient welding on the right fuel delivery pipe, creating the potential for fuel to 
leak and increase the chance of a fire. 

Source: http://www.latimes.com/business/autos/la-fi-hv-tovota-camrv-rx-sienna-recall- 
20140918-story.html 



5. September 18, U.S. Department of Labor - (Ohio) Workers exposed to dangerous 
machine hazards at MCM Industries Co. The Occupational Safety and Health 
Administration cited MCM Industries Co. for 1 willful and 17 serious safety and health 
violations at the company’s Cleveland facility for exposing workers to amputation 
hazards. Proposed fines totaled $126,700. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26724 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. September 18, Threatpost - (International) Dyre trojan caught in the cookie jar. An 
analysis by Adallom researchers found that a new variant of the Dyre banking trojan is 
targeting login credentials for large banks and corporate accounts. The new variant is 
capable of stealing client certificates and browser cookies, potentially acquiring the 
same account persistence for attackers as that held by legitimate users. 

Source: http://threatpost.com/dvre-troian-caught-in-the-cookie-iar/108373 

7. September 18, Southern California City News Service - (California) Four charged 
with making credit cards with ‘skimmed’ info. Four men from the Los Angeles area 
were arrested September 18 for allegedly using skimming devices to obtain payment 
card information, creating fraudulent payment cards, and stealing over $2 million from 
around 10,000 accounts. 

Source: http://www.encinitasadvocate.com/news/2014/sep/18/credit-card-skimming- 
encinitas/ 

8. September 18, Federal Bureau of Investigation - (California) Penny stock fraud nets 
millions. The FBI announced the arrest of two Los Angeles men September 18 for 
allegedly running a penny stock manipulation scheme that used shell companies to 
create the illusion of demand for stocks in several companies in order to defraud 
investors of several million dollars. The alleged scheme also used kickbacks paid to 
brokers in order to make the penny stocks appear to have value. 
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Source: http://www.fbi.gov/cleveland/press-releases/2014/pennv-stock-fraud-nets- 
millions 



For another story, see item 33 
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Transportation Systems Sector 

9. September 19, Associated Press - (Arizona) Shooting suspect captured at Sky 
Harbor. Phoenix Sky Harbor International Airport in Arizona reopened Terminal 4 
after authorities locked it down for over 3 hours and grounded its flights September 18 
in search of three suspects connected to a shooting at a nearby Tempe gasoline station. 
Police located and arrested all three suspects. 

Source: http://www.azfamilv.com/news/Police-search-for-Tempe-shooting-suspects-at- 
Sky-Harbor-275669941.html 

10. September 18, Associated Press - (California) Passenger says JetBlue plane filled 
with smoke. An Austin, Texas-bound JetBlue flight that was forced to return to Long 
Beach Airport shortly after takeoff September 18 landed safely when the pilot declared 
an emergency after smoke was seen coming from the engine and filled the cabin, 
prompting passengers to evacuate onto the runway using the plane’s emergency slides. 
Four people sought medical attention and the airport’s main runway was closed for 
approximately 2 hours while the airplane was towed. 

Source: http://abcnews.go.com/Sports/wireStorv/airliner-returns-long-beach- 
emergency-25599587 

11. September 18, Petaluma Argus-Courier - (California) Highway reopens after head- 
on collision that left an 83-year-old man dead. Lakeville Highway in Sonoma 
County was closed for more than 2 hours September 1 8 while authorities cleared the 
scene of an accident involving 2 cars that collided head-on and left 1 person dead and 2 
others injured. 

Source: http://www.petaluma360.com/news/2854276-181/traffic-accident-shuts-down- 
lakeville 

12. September 18, Coos Bay World - (Oregon) Semi driver cited in Scottsburg Bridge 
crash. State Highway 38 near Scottsburg in Oregon was closed for nearly 12 hours 
September 18 after a semi-truck hauling lumber crashed on the Scottsburg Bridge and 
spilled lumber products and leaked an estimated 100 gallons of diesel fuel into the 
Umpqua River. Hazmat crews responded to the scene as the driver was transported to a 
nearby hospital for minor injuries. 

Source: http://theworldlink.com/news/local/semi-crash-blocks-oregon-east-of- 
reedsport/article b0b6d016-3f4b-l Ie4-a84d-23fa4bc4afda.html 

13. September 18, WSAZ 3 Huntington - (West Virginia) 1-77 reopens following early 
morning crash. Northbound lanes of Interstate 77 in Jackson County, West Virginia, 
reopened to traffic nearly 1 1 hours after crews cleared the scene following an accident 
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involving 2 semi-trucks September 18. One driver was transported to an area hospital 
with injuries. 

Source: http://www.wsaz.com/home/headlines/275567301.html 

14. September 17, Associated Press - (Arizona) Union Pacific reopens line after Arizona 
wreck. Both sets of railroad tracks in Picacho Peak in Tucson reopened September 17 
after 39 railroad cars derailed from a 107-car Union Pacific freight train carrying empty 
freight containers September 15. The cause of the derailment is under investigation. 
Source: http://www.newstimes.com/news/article/Union-Pacific-reopens-line-after- 
Arizona- wreck-5762008 .php 
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Food and Agriculture Sector 

15. September 18, Lancaster Intelligencer Journal/Lancaster New Era - (Pennsylvania) 

Man dies in silo accident on Drumore Township farm. A worker on a Drumore 
Township farm died September 17 when he was overcome by methane gas after he 
entered a grain bin to ensure that it was being filled evenly. A second worker suffered 
injuries as he exited the grain bin after he was also overcome by methane gas during a 
rescue attempt. 

Source: http://lancasteronline.com/news/local/man-dies-in-silo-accident-on-drumore- 
township-farm/article 6c592982-3e97-l Ie4-a501-0017a43b2370.html 

16. September 18, U.S. Food and Drug Administration - (National) An alert on 
uneviscerated dried roach (Vobla). S&S Food Import Corp., issued a recall for its 
Uneviscerated Dried Roach (Vobla) September 16 after routine sampling by the New 
York State Department of Agriculture and Markets revealed the fish had not been 
properly eviscerated before processing and may be contaminated with Clostridium 
botulinum spores. 

Source: http://www.fda.gov/Safety/Recalls/ucm415188.htm 

17. September 18, U.S. Environmental Protection Agency - (Washington) Yakima 
fertilizer manufacturer signs settlement with EPA to resolve hazardous waste 
violations. Kronos Micronutrients and the U.S. Environmental Protection Agency 
entered into an agreement September 18 to resolve charges that the fertilizer 
manufacturer improperly disposed of hazardous waste at its Moxee facility, among 
other violations that were discovered by a June 2012 inspection. The company will pay 
$206,900 in penalties and agreed to implement a cleanup plan. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/f2e2e 

6el4f3f34b885257d57005b7212 

18. September 17, Fresno Bee - (California) Ivanhoe packinghouse fire idles 75 
workers. Authorities are investigating the cause of a 3-alarm fire and propane tank 
explosion that engulfed a fruit packinghouse and a cold storage unit at Phillips Farm in 
Ivanhoe September 17. Damage to the facility and fruit is estimated to be millions of 
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dollars. 

Source: http://www.fresnobee.com/2014/09/17/4128365 fire-engulfs-ivanhoe- 
packinghouse.html 
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Water and Wastewater Systems Sector 

19. September 19, WJXX 25 Orange ParkAVTLV 12 Jacksonville - (Florida) 

Precautionary boil water notice issued for Palatka. A precautionary boil water 
advisory was issued for the city of Palatka September 18 until further notice due to low 
water pressure at the City Water Plant caused by a lightning storm. 

Source: http://www.firstcoastnews.com/story/news/local/2014/09/19/palatka-boil- 
&template=southernMar yland w ater-notice/ 15862889/ 

20. September 18, Southern Maryland News - (Maryland) Health department issues 
water advisory. The Charles County Department of Health issued a temporary water 
advisory against swimming and ingesting water from Liverpool Point, Mallows Bay, 
and the Potomac River September 18 after officials discovered a toxic algae bloom on 
the water’s surface. 

Source: 

http ://w w w. somdne ws .com/article/20 1 409 1 8/NEW S/1 409 1 9009/ 1 043&template=south 
emMaryland 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

21. September 19, CNN - (California; Oregon) Arson arrest made at 10 wildfires scorch 
California; state emergency declared. Police arrested a man September 18 and 
charged him with arson in connection to starting the 73,184-acre King Fire in El 
Dorado County, California, that is 10 percent contained and threatens over 12,000 
residences. Fire crews in California worked to contain 9 other fires that have burned 
over 125,000 acres and destroyed dozens of structures, including near the Oregon 
border. 

Source: http://www.cnn.com/2014/09/18/us/california-fires/ 

22. September 19, KHOU 11 Houston - (Texas) Classes canceled at Willowridge HS due 
to power outage. A power outage prompted the cancellation of classes at Willowridge 
High School in Houston September 19. 

Source: http://www.khou.com/story/news/local/neighborhood/2014/09/19/classes- 
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canceled-at-willowridge-hs-due-to-power-outage/15877473/ 



23. September 18, KITV 4 Honolulu - (Hawaii) Chemical odor forces evacuations at 
Honoka’a schools. A chemical odor that caused about 40 students and 10 adults with 
symptoms of nausea, dizziness, and respiratory issues to be treated at area medical 
centers prompted officials to evacuate and cancel classes for Honoka’a elementary, 
intermediate, and high schools September 18. Classes were scheduled to resume 
September 19 after authorities determined the odor was caused by a nearby resident 
using a mix of chemicals to spray their yard. 

Source: http://www.kitv.com/news/chemical-odor-forces-evacuations-at-honokaa- 
schools/28138058 

24. September 18, Austin American-State sman - (Texas) Teen being charged with assault 
in Bastrop High stabbing. Bastrop High School in Texas was evacuated September 18 
after a student was stabbed and injured on campus during a fight with a teenager. Police 
arrested and charged the teenager and the student was transported to an area hospital. 
Source: http://www.statesman.com/news/news/crime-law/bastrop-school-district- 
student-stabbed-at-high-sc/nhPxm/ 

25. September 18, Tennessee Tech Oracle - (Tennessee) Internet outages affect campus 
productivity, Frontier fixes connectivity. Internet service at Tennessee Technological 
University was down for 10 hours September 16 due to a broken fiber cable connection 
caused by a dump truck that broke the connection near Carthage. 

Source: http://www.tntechoracle.com/news/view.php/848759/Intemet-Outages-affect- 
campus-productiv 

26. September 17, KPRC 2 Houston - (Texas) 6 students taken to hospital after school 
bus accident on Highway 288. An accident between a school bus transporting 
elementary school students and a car left six students injured September 17 when the 
two vehicles collided on Highway 288 in Houston. 

Source: http://www.click2houston.com/news/school-bus-accident-on-highwav-288- 
northbound-near-6 10/28099976 



For another story, see item 34 



T Return to top i 

Emergency Services Sector 

See item 30 
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Information Technology Sector 

27. September 19, Securityweek - (International) Apple fixes numerous vulnerabilities 
with release of Mac OS X 10.9.5. Apple released the latest version of its OS X 
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operating system September 18, which addresses over 40 vulnerabilities that could lead 
to information disclosure, arbitrary code execution, privilege escalation, and other 
issues. Apple also released security updates for its OS X Server, Apple TV, Xcode 
development platform, and Safari Web browser. 

Source: http://www.securitvweek.com/apple-fixes-numerous-vulnerabilities-release- 
mac-os-x-1095 



28. September 18, IDG News Service - (International) Malicious advertisements 

distributed by Doubleclick, Zedo networks. Researchers at Malwarebytes found that 
the Doubleclick and Zedo advertisement networks have been delivering malicious ads 
to several popular Web sites including Last.fm, The Times of Israel, and The Jerusalem 
Post. The malicious ads redirect users to a page hosting the Nuclear exploit kit which 
then attempts to drop the Zemot malware used by attackers to download additional 
malicious components. 

Source: http://www.networkworld.com/article/2686393/malicious-advertisements- 
distributed-by-doubleclick-zedo-networks.html 



For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

29. September 19, Natchez Democrat - (Mississippi) Cable ONE fiber optic cable cut. 
Nearly 4,000 Cable ONE customers in Natchez and Yazoo City lost Internet and other 
services for nearly 3 hours September 18 when a fiber cable was cut. 

Source: http://www.natchezdemocrat.com/2014/09/19/cable-one-fiber-optic-cable-cut/ 

30. September 18, Fluvanna Review - (Virginia) Communication outage could affect 911 
calls. Internet, land line, and some cellular phone service was disrupted for 
CenturyLink customers around the Lake Monticello area in Fluvanna County 
September 18 due to a cut fiber optic line. Officials warned the public that 9-1-1 calls 
may also be impacted as well. 

Source: 

http://www.fluvannareview.com/index.php?option=com content&view=article&id=59 
83:outage 
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Commercial Facilities Sector 



31. September 19, WKYT 27 Lexington - (Kentucky) Police search Fayette Mall for 
gunman during iPhone 6 camp out. Several people were evacuated from the Fayette 
Mall in Lexington September 18 after police received reports of a man who pulled out a 
gun and was chased away by a security guard. Police are investigating the incident and 
searching for the armed man. 

Source: http://www.wkvt.com/home/headlines/Reports-of-gunman-at-Fayette-Mall- 
prompt-evacuation-275710331.html 

32. September 19, WPVI 6 Philadelphia - (Pennsylvania) 3 hurt, including 2 firefighters, 
in massive warehouse fire in Kensington. A fire that broke out September 19 in a 
vacant commercial property grew to 4-alarms as it engulfed an adjacent paper storage 
facility in the Kensington area of Philadelphia, causing at least one of the buildings to 
collapse. Three individuals, including two firefighters, were injured by the blaze. 
Source: http://6abc.com/news/3-hurt-in-massive-warehouse-fire-in-kensington/315368/ 

33. September 18, Reuters - (International) Home Depot breach bigger than Target at 
56 million cards. Home Depot officials reported September 18 that 56 million payment 
cards were likely compromised when attackers used custom-built malware to breach 
the networks of stores in the U.S. and Canada between April and September 8 when the 
breach was detected. Costs associated with the breach are estimated to total $62 million 
to date. 

Source: http://www.reuters.com/article/2014/09/18/us-home-depot-dataprotection- 
idUSKBN0HD2J420140918 

34. September 18, Detroit News Washington Bureau - (Michigan) Michigan: 118,000 
homes, buildings damaged in flooding. The governor of Michigan requested a federal 
disaster declaration and federal aid for the metro Detroit area following heavy rainfall 
and flooding August 11-12 that caused $1.1 billion in damage to more than 118,000 
businesses and homes in the region. Authorities also reported that public buildings and 
equipment suffered an estimated $16.7 million in damage. 

Source: http://www.detroitnews.com/story/news/local/metro- 
detroit/20 1 4/09/ 1 8/michigan-flood/ 15822567/ 

35. September 18, KCNC 4 Denver - (Colorado) Powder that caused evacuation wasn’t 
dangerous, sheriff says. About 250 people were evacuated from the first floors of the 
Nordstrom Credit Inc., office building in Arapahoe County September 18 after an 
envelope containing white powder was discovered in the building’s mail room. 
HAZMAT crews decontaminated seven individuals who came in contact with the 
powder and held two people at the scene for observation, while authorities later 
determined that the powder did not present a threat. 

Source: http://denver.cbslocal.com/2014/09/18/white-powder-investigation-arapahoe- 
county/ 

36. September 18, KMBC 9 Kansas City - (Kansas) Threat forces evacuation of Roeland 
Park Walmart. A Walmart in Roeland Park was evacuated for several hours 



-9 - 



T Return to tool 


September 1 8 while authorities investigated a bomb threat that was phoned in to the 
store. Officials cleared the scene after no suspicious devices were found. 

Source: httD://www.kmbc.com/news/threat-forces-evacuation-of-roeland-Dark- 
walmart/28 123754 



Dams Sector 

Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 11 - 




